CVE Vulnerability Catalog

Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.

Buffer overflow in command.C in rxvt-unicode before version 5.3 allows remote attackers to execute arbitrary code via a crafted file containing long escape sequences.

Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication.

A vulnerability in Firefox, Mozilla Suite, and Netscape browsers allows remote attackers to execute arbitrary code by adding a new search plugin using sidebar.addSearchEngine. The issue is fixed in Firefox 1.0.3, Mozilla Suite 1.7.7, and Netscape 7.2.

In ZeroBoard 4.1pl5 and earlier, multiple PHP files (print_category.php, login.php, setup.php, ask_password.php, error.php) contain a remote file inclusion vulnerability. An attacker can modify the 'dir' parameter to point to a remote server containing malicious PHP code, enabling its execution.

Multiple SQL injection vulnerabilities were found in Valdersoft Shopping Cart 3.0. An attacker can remotely execute arbitrary SQL commands by manipulating parameters in various PHP scripts.

Multiple SQL injection vulnerabilities in index.php of InterAKT MX Kart 1.1.2 allow remote attackers to execute arbitrary SQL commands via the idp, id_ctg, or id_man parameters.

Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.

A buffer overflow vulnerability in the HTTP redirection functionality in conn.c of Axel before version 1.0b may allow remote attackers to execute arbitrary code.

A buffer overflow vulnerability in the slc_add_reply function in BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.

Unknown vulnerability in subs.pl script in WebAPP versions 0.9.9 through 0.9.9.2. May allow attacks using shell metacharacters or '..' sequences.

The netfilter/iptables module in Linux kernel before version 2.6.8.1 contains a vulnerability that allows a remote attacker to cause a kernel crash (denial of service) or bypass firewall rules by sending crafted packets. The issue is due to improper handling of packets by the skb_checksum_help function.

Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.

Unknown vulnerability in Webmin and Usermin before version 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact.

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by (1) the Curl_input_ntlm function in http_ntlm.c during NTLM authentication or (2) the Curl_krb_kauth and krb4_auth functions in krb4.c during Kerberos authentication.

Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the iChannel, iData, iCat, DAT_PARENT, and iRate parameters in various ASP scripts.

Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

Heap-based buffer overflow in the env_opt_add function in telnet.c in BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses containing a large number of characters requiring escaping, consuming more memory than allocated.

Multiple SQL injection vulnerabilities in album_search.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the mode or search parameters.

Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81.